See: Anything that can open ports. NAT of any kind tends to not allow opening ports.

You can get Let’s Encrypt certificates for DuckDNS, so you don’t even need to own anything.

Works with anything that can open ports. DuckDNS works by pinging their service from anywhere to update the target IP for the subdomain.

You do realize all this is easily done with a reverse proxy + DuckDNS?